Doh! HomeDepot using AV from 2007...

Home Depot is facing claims it ignored security warnings from staff, who say prior to its loss of 56 million credit cards, it failed to update anti virus since 2007, did not consistently monitor its network for signs of attack, and failed to properly audit its eventually-hacked payment terminals.

EDIT: It gets better: "In 2012 Home Depot hired and promoted Ricky Joe Mitchell within its security ranks before he was in April sentenced to four years prison for performing a factory reset on his former employers' servers."